Meana Petro
HS-08IntermediaOla 2TIIoT

Monitoreo de Ciberseguridad OT

En una frase

Watches the control network passively for devices, traffic and commands that should not be there.

El problema

Most control networks have no inventory of what is connected to them and no record of normal traffic. A new engineering laptop, a modified controller program or an unexpected command sequence is invisible until something breaks.

Cómo funciona

Passive traffic monitoring via SPAN ports builds an asset inventory and a baseline of normal protocol behaviour per device, then alerts on new assets, protocol anomalies and unauthorised programming commands. Monitoring is strictly passive — no active scanning of production controllers, ever — and zones follow the Purdue model with IEC 62443 conduit definitions.

Datos necesarios

  • SPAN or TAP access at the relevant network layers
  • Network architecture documentation and Purdue zone definitions
  • Asset inventory to the extent it exists
  • Change management records for correlating legitimate changes

Qué obtiene

  • Continuously maintained OT asset inventory with firmware and protocol detail
  • Anomaly alerts for new assets, unusual traffic and controller programming changes
  • Segmentation gap report against the target IEC 62443 zone model

Qué no puede hacer

Passive monitoring sees only what crosses the monitored segments; an attack contained within an unmonitored cell is invisible, and serial and fieldbus links below the monitored layer are generally not covered. This is detection, not prevention, and it does not remove the need for segmentation, hardening and access control.

Cada página de capacidad declara una limitación real. Si un proveedor no puede decirle dónde termina su producto, no le están diciendo la verdad sobre dónde empieza.

Capacidades relacionadas

  • OP-07Fundacional

    Centro Integrado de Operaciones

    One room, and one screen layout, where production, drilling, maintenance and HSE see the same numbers at the same time.

    Digitalización de OperacionesTI
  • HS-02Intermedia

    Detección de Fugas de Gas y Llama

    Adds optical gas imaging and flame detection on camera to the fixed point detectors, so a leak between detectors is still seen.

    HSE, Emisiones y SeguridadIAIoT
  • HS-03Intermedia

    Monitoreo de Metano y Reporte OGMP 2.0

    Builds a methane inventory from measurements rather than from emission factors, at the level of detail OGMP 2.0 actually asks for.

    HSE, Emisiones y SeguridadIADominio
  • HS-07Intermedia

    Inspección con Drones y Robots

    Flies or drives the inspection route so that people do not have to work at height or enter confined spaces as often.

    HSE, Emisiones y SeguridadIoTIA